3 ms·
Can anyone comment on whether any of these new all-in-one distribution formats actually try to provide secure sandboxing that is designed to resist deliberate a
by kibwen 4y ago
Can anyone comment on whether any of these new all-in-one distribution formats actually try to provide secure sandboxing that is designed to resist deliberate attacks from within, or is their sandboxing just docker-style best-effort sandboxing with a ton of holes that can't be relied upon for running untrusted executables securely?
- gtirloni 4y agoWhich attacks exactly? The sandboxing features are documented: https://docs.flatpak.org/en/latest/sandbox-permissions.html https://docs.flatpak.org/en/latest/sandbox-permissions.html